tasks/bootstrap.yml

   1 ---
   2 - name: Remove apt-config-file derived from preseeding
   3   ansible.builtin.file:
   4     path: /etc/apt/apt.conf
   5     state: absent
   6   when: ("baremetal" in group_names)
   7 - name: Create apt-proxy config file
   8   ansible.builtin.template:
   9     src: apt-proxy_01proxy.j2
  10     dest: /etc/apt/apt.conf.d/01proxy
  11   when: ("DMZ" not in group_names)
  12 - name: Remove apt-config-file only for aptproxy
  13   ansible.builtin.file:
  14     path: /etc/apt/apt.conf.d/01proxy
  15     state: absent
  16   when: ("aptproxy" in inventory_hostname)
  17 - name: Copy apt-unattended-upgrades config file
  18   ansible.builtin.copy:
  19     src: apt-unattended-upgrades_10periodic
  20     dest: /etc/apt/apt.conf.d/10periodic
  21 - name: Update and upgrade apt packages
  22   ansible.builtin.apt:
  23     update_cache: true
  24     upgrade: true
  25     autoremove: true
  26 - name: Install core-packages
  27   ansible.builtin.apt:
  28     pkg:
  29       - sudo
  30       - gnupg
  31       - htop
  32       - ncdu
  33       - vim
  34       - tmux
  35       - gnupg2
  36       - nethogs
  37       - iftop
  38       - rsync
  39       - ripgrep
  40       - nnn
  41       #- duf
  42 - name: Install core-packages for bare-metal-server
  43   ansible.builtin.apt:
  44     pkg:
  45       - inxi
  46   when: ("baremetal" in group_names)
  47 - name: Install core-packages for server in DMZ
  48   ansible.builtin.apt:
  49     pkg:
  50       - fail2ban
  51   when: ("DMZ" in group_names)